Ghibli Park: names and addresses of 1,525 staff applicants were stolen from a contractor's recruitment system, and the contractor was asked for money
On September 22, personal data of 1,525 applicants was stolen from the recruitment system of Tetsu Corporation, the contractor supplying staff.
Disclosed
2022-09-24
Organizations involved
1
Leaked or at risk
Unknown
Downtime
Unknown
What happened
Impact
The names, addresses and other data of 1,525 people who applied to work at Ghibli Park were stolen. Nikkei xTECH reported that a ransomware method that demands a ransom was used. [1]
Timeline
- Started, Detected 2022-09-22
- Disclosed 2022-09-24
- 2 days
Attack or cause
- Method
- [Ransomware]
- Impact
- [Data leak][Extortion]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
Organizations involved
[Through a supplier][Major]Aichi, Nagoya, Naka-kuPersonal services and entertainment1,525 leaked
Ghibli Park Co., Ltd.The recruitment management system of Tetsu Corporation, which supplies its staff, was attacked.
Sources
- [1][News]ジブリパークのスタッフ応募者1525人の情報が漏洩、業務委託先にランサムウエア攻撃 | 日経クロステック(xTECH)Nikkei xTECH · 2022-09-26